Base de CVEs

CVE-2025-34164 Crítica · 9.3 CWE-122 29/08/2025

NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service (DoS) or execute arbitrary code.

CVE-2025-34522 Crítica · 9.8 CWE-122 27/08/2025

Arcserve UDP < 10.2 Pre-Authentication Heap Overflow

A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending specially crafted input to the target system. Improper bounds checking allows an attacker to overwrite heap memory, potentially leading to application crashes or remote code execution. Exploitation occurs in the context of the affected process and does not require user interaction. The vulnerability poses a high risk due to its pre-authentication nature and potential for full compromise. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.

CVE-2025-57803 Alta · 8.8 CWE-122 26/08/2025

ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_per_line (stride) to a tiny value while the per-row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the (overflowed) stride, so the first row immediately writes past its slot and into adjacent heap memory with attacker-controlled bytes. This is a classic, powerful primitive for heap corruption in common auto-convert pipelines. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVE-2025-53630 Alta · 8.9 CWE-122 10/07/2025

Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579.

CVE-2025-24993 Alta · 7.8 KEV Alta · 53 CWE-122 11/03/2025

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2025-24985 Alta · 7.8 KEV Alta · 61 Exploit público CWE-122 11/03/2025

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-21418 Alta · 7.8 KEV Alta · 53 CWE-122 11/02/2025

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-21333 Alta · 7.8 KEV Alta · 69 Exploit público CWE-122 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-49138 Alta · 7.8 KEV Urgente · 70 Exploit público CWE-122 11/12/2024

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-34459 Alta · 7.5 CWE-122 14/05/2024

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7....

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

CVE-2023-32028 Alta · 7.8 CWE-122 15/06/2023

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVE-2023-24551 Alta · 7.8 CWE-122 14/02/2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

CVE-2023-24550 Alta · 7.8 CWE-122 14/02/2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

CVE-2022-2849 Alta · 7.8 CWE-122 17/08/2022